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1 . Method of authentication, wherein a client (CL) requests a file from a server (SV), 
whereby the client and the server share a common secret value (S) and thereby 
belong to an accepted group, and whereby 

the client forms a first message (M1) comprising 

- a filename (FN), 

- a nonce (N) which Is associated with the given filename (FN), 

- a first hash value (H(S'^FN); 1 0) according to a first hash function (H1 , H2) 
formed from the filename (FN) and the secret value (S). 

2. Method according to claim 1 , wherein the server 

- extracts the filename (FN) of a received first message (Ml), 

- extracts the first hash value (10), 

- forms a value of the received filename (FN) and the secret value (S), 

- forms a second hash value (H(S'^FN); 20) according to the first hash function 
(H1 , H2) formed from the value of the filename (FN) and the secret value (S), 

- compares the first hash value (1 0) with the second hash value (20) and if the val- 
ues are the same, establishes that the first message (M1) stems from a client be- 
longing to the accepted group, otherwise establishes that the client does not be- 
long to the accepted group. 
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3. Method according to claim 1 or 2, wiierein the server responds to the request from 
the client by forming a second message (M2) comprising 

- a file (F) corresponding to the requested filename (FN), 

5 

- the received nonce (N) which is associated with the given filename (FN), 

- a third hash value (H(S'^FN); 30) according to a second hash function (H3, H4) 
formed from the value of the received nonce (N) and the secret value (S). 

10 

4. Method according to claim 3, wherein the client 

- extracts the file (F) of the received second message (M2), 

15 

- extracts the third hash value (30) from the second message, 

- forms a value of the nonce (N) associated with the filename (FN) and the secret 
value (S), 

20 

- forms a fourth hash value (H(S'^N); 40) according to the second hash function 
(H3, H4) formed from the value of the nonce (N) associated with the requested 
filename and the secret value (S), 

25 - compares the third hash value (30) with the fourth hash value (40) and if the val- 

ues are the same establishes that the second message {M2) stems from a server 
belonging to the accepted group, othenvise establishes that the server does not 
belong to the accepted group. 

30 

5. Method according to claim 3 or 4, wherein the first hash function (H1, H2) is the 
same as the second hash function (H3, H4). 

6. Method according to any previous claim wherein, the inputs to any respective hash 
35 function (HI , H2) are concatenated. 
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7. Client sharing a common secret value (S) with a server, the client and the server 
thereby belonging to an accepted group, whereby 



the client forms a first message (M1) comprising 

5 

- a filename (FN), 

- a nonce (N) which is associated with the given filename (FN), 

10 - a first hash value (H(S''FN); 10) according to a first hash function (H1 , H2) 

formed from the values of the filename (FN) and the secret value (S), and whereby 

the client receives a second message from the server, the client 

15 - extracting a file (F) of the received second message (M2), 

- extracting a third hash value (30) from the second message, 

- forming a value of the nonce (N) and the secret value (S), 

20 

- forming a fourth hash value (H(S'^N); 40) according to a second hash function 
(H3, H4) formed from the value of the nonce (FN) associated with the requested 
filename and the secret value (S), 

25 - comparing the third hash value (30) with the fourth hash value (40) and if the val- 

ues are the same establishing that the second message (M2) stems from a server 
belonging to the accepted group, and if othenwise, establishing that the server 
does not belong to the accepted group. 
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8. Server sharing a common secret value (S) with a client, the client and the server 
thereby belonging to an accepted group, whereby the server receives a first mes- 
sage from the client, the server 

5 - extracting the filename (FN) from the received first message (M1 ), 

- extracting a first hash value (10) from the received first message (M1), 

- forming a value of the received filename (FN) and the secret value (S), 
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- forming a second hash value (H(S'^FN); 20) according to the first hash function 
(H1 , H2) formed from the value of the filename (FN) and the secret value (S), 

- comparing the first hash value (10) with the second hash value (20) and if the 
15 values are the same establishing that the first message (M1) stems from a client 

belonging to the accepted group, otherwise establishing that the client does not 
belong to the accepted group. 

20 9. Server according to claim 8, wherein the server responds by sending a second 
message (M2) comprising 

- a file (F) corresponding to the requested filename (FN), 

25 - a third hash value (H(S'^FN); 10) according to a second hash function (H3, H4) 

formed from the value of the received nonce (N) associated with the filename (FN) 
and the secret value (S). 



